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The S/KEY One-Time Password System 
Status of this Memo 


This memo provides information for the Internet community. This memo 
does not specify an Internet standard of any kind. Distribution of 
this memo is unlimited. 


Abstract 


This document describes the S/KEY* One-Time Password system as 
released for public use by Bellcore and as described in reference 
[3]. A reference implementation and documentation are available by 
anonymous ftp from ftp.bellcore.com in the directories pub/nmh/... 


Overview 


One form of attack on computing system connected to the Internet is 
eavesdropping on network connections to obtain login id's and 
passwords of legitimate users. The captured login id and password 
are, at a later time, used gain access to the system. The S/KEY 
One-Time Password system is designed to counter this type of attack, 
called a replay attack. 


With the S/KEY system, only a single use password ever crosses the 
network. The user's secret pass-phrase never crosses the network at 
any time, including during login or when executing other commands 
requiring authentication such as the UNIX commands passwd or su. 
Thus, it is not vulnerable to eavesdropping/replay attacks. Added 
security is provided by the property that no secret information need 
be stored on any system, including the host being protected. 


The S/KEY system protects against external passive attacks against 
the authentication subsystem. It does not prevent a network 
eavesdropper from gaining access to private information, and does not 
provide protection against "inside jobs" or against active attacks 
where the potential intruder as able to intercept and modify the 
packet stream. 
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Introduction 


There are two sides to the operation of the S/KEY one-time password 
system. On the client side, the appropriate one-time password must 
be generated. On the host side, the server must verify the one-time 
password and permit the secure changing of the user's secret pass- 
phrase. 


An S/KEY system client passes the user's secret pass-phrase through 
multiple applications of a secure hash function to produce a one-time 
password. On each use, the number of applications is reduced by one. 
Thus a unique sequence of passwords is generated. The S/KEY system 
host verifies the one-time password by making one pass though the 
secure hash function and comparing the result with the previous one- 
time password. This technique was first suggested by Leslie Lamport 
E 


Secure Hash Function 


A secure hash function is a function that is easy to compute in the 
forward direction, but computationally infeasible to invert. The 
S/KEY system is based on the MD4 Message Digest algorithm designed by 
Ronald Rivest [2]. Since the S/KEY authentication system went into 
use, the MD5 Message Digest was released. We have chosen to continue 
to use MD4 due the large number of client programs that have been 
distributed. Some sites have generated functionally similar systems 
based on MD5. Clearly clients and hosts must use the same secure 
hash function to interoperate. 


The S/KEY system one-time passwords are 64 bits in length. This is 
believed to be long enough to be secure and short enough to be 
manually entered (see below, Form of Passwords) when necessary. 


The S/KEY system applies the secure hash function multiple times, 
producing a 64 bit final output. MD4 accepts an arbitrary number of 
bits as input and produces a 128 bit output. The S/KEY secure hash 
function consists of applying MD4 to a 64 bit input and folding the 
output of MD4 with exclusive or to produce a 64 bit output. 


Generation of One-Time Passwords 
This section describes the computation of the S/KEY one-time 
passwords. It consists of a preparatory step in which all inputs are 


combined, a generation step where the secure hash function is applied 
multiple times, and an output function where the 64 bit one-time 
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password is displayed in readable form. 


The client's secret pass phrase may be of any length and should be 
more than eight characters. As the S/KEY secure hash function 
described above accepts a 64 bit input, a preparatory step is needed. 
In this step, the pass phrase is concatenated with a seed that is 
transmitted from the server in clear text. This non-secret seed 
allows a client to use the same secret pass phrase on multiple 
machines (using different seeds) and to safely recycle secret 


passwords by changing the seed. (For ease in parsing, the seed may 
not contain any blanks, and should consist of strictly alphanumeric 
characters.) The result of the concatenation is passed through MD4, 


and then reduced to 64 bits by exclusive-OR of the two 8-byte halves. 


The following code fragment uses the MD4 implementation defined in 
RFC 1320 [2] and defines the preparatory step: 


strcpy (buf, seed); 

strcat (buf, passwd); 

MDbegin (&md) 

MDupdate (mad, (unsigned char *)buf,8*buflen); 


/* Fold result to 64 bits */ 
md.buffer[0] ^= md.buffer[2]; 
md.buffer[1] ^= md.buffer[3]; 


A sequence of one-time passwords is produced by applying the secure 
hash function multiple times to the output of the preparatory step 
(called S). That is, the first one-time password is produced by 
passing S through the secure hash function a number of times (N) 
specified by the user. The next one-time password is generated by 
passing S though the secure hash function N-1 times. An eavesdropper 
who has monitored the transmission of a one-time password would not 
be able to generate any succeeding password because doing so would 
require inverting the hash function. 


Form of Passwords 


The one-time password generated by the above procedure is 64 bits in 
length. Entering a 64 bit number is a difficult and error prone 
process. Some S/KEY system one-time password calculator programs 
insert this password into the input stream, others make it available 
for system cut and paste. Some arrangements require the one-time 
password to be entered manually. The S/KEY system is designed to 
facilitate this manual entry without impeding automatic methods. The 
one-time password is therefore converted to, and accepted as, a 
sequence of six short (1 to 4 letter) English words. Each word is 
chosen from a dictionary of 2048 words; at 11 bits per word, all 
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one-time passwords may be encoded. Interoperability requires at all 
S/KEY system hosts and calculators use the same dictionary. The 
standard dictionary is attached to this RFC. 


Verification of One-Time Passwords 


A function on the host system that requires S/KEY authentication is 
expected to issue an S/KEY challenge. This challenge give the client 
the current S/KEY parameters - the sequence number and seed. It is 
important that the S/KEY challenge be in a standard format so that 
automated clients (see below) can recognize the challenge and extract 
the parameters. The format of the challenge is: 


s/key sequence_integer seed 


The three tokens are separated by single space characters. The 
challenge is terminated by a blank or a newline. 


Given the parameters and the secret pass phrase, the client can 
compute (or lookup) the one time password. It then passes it to the 
host system where it can be verified. 


The host system has a file (on the UNIX reference implementation it 
is /etc/skeykeys) containing, for each user, the one-time password 
from the last successful login, or it may be initialized with the 
first one-time password of the sequence using the keyinit command 
(this command name may be implementation dependent). To verify an 
authentication attempt, it passes the transmitted one-time password 
through the secure hash function one time. If the result of this 
operation matches the stored previous one-time password, the 
authentication is successful and the accepted one-time password is 
stored for future use. 


Because the number of hash function applications executed by the 
client decreases by one each time, at some point the user must 
reinitialize the system of be unable to login again. This is done by 
using the keyinit command which allows the changing of the secret 
pass phrase, the iteration count, and the seed. A frequent technique 
is to increment a trailing digit(s) of the seed and to reset the 
iteration count (to something in range of 500-1000). 


Clients 


Several programs are available to calculate S/KEY one time passwords. 
Included in the reference implementation are command line interfaces 
for UNIX and PC systems (key), TSR interfaces for PCs (ctkey, 
termkey, and popkey), and GUI interfaces for Macintosh and Windows 
(keyapp and un-named Macintosh interface). 
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The most basic calculator is the key command whose format is: 
key [-n count] sequence seed 


The optional count is used to display more than a single one time 
password. This is useful to create a paper list of one time 
passwords. 


The most automated calculator is the termkey program that runs as a 
Terminate and Stay Resident (TSR) program on a PC. It scans the 
screen to find the S/KEY parameters, prompts for the secret pass 
phrase, and stuffs the one time password into the keyboard buffer. 
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Security Considerations 


This entire document is about Security Considerations. 
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Dictionary for Converting Between S/KEY 6-Word and Binary Formats 


This dictionary is from the module put.c. The code for this module, 
and an implementation of the entire S/KEY One Time Password System is 
available by anonymous ftp from ftp.bellcore.com in the directory 
pub/nmh/skey. 


{ TUS "ABE", "ACE", "ACT"; "ADT, "ADA", "ADD", 
"AGO", "ALD; "AIM", "AIR", "ALL", "ALP", "AM", "AMY", 
" AN " ; " ANA " S " AND " 7 " ANN " " " ANT " " ANY " , " AP E " , " AP S " 
"APT " $ "ARC " P "ARE " j "ARK " P "ARI " F "ART " y "AS " » "ASH " H 
" ASK" e " AT " A " ATE " A " AUG " " " AUK " P " AVE " A " AWE " P " AWK " ; 
" AWL " " " AWN " z " AX " d " AYE " " " BAD " $ " BAG " " " BAH " P " BAD " F 
" BAN " " " BAR" " " BAT " " " BAY " " " BE " P " BED " S " BEE " , " BEG " n 
"BEN", "BET", hue aaa "BIB", "BID", "BIG", "BIN", "BIT", 
" BOB " S " BOG " $ " BON " " " BOO " i " BOP " * " BOW " F " BOY " " BUB " P 


" BUD " y " BUG " , "BUM" " " BUN " A " BUS " 2 " BUT " y "BUY " $ " BY " , 

" BYE " " " CAB " e " CAL " y " CAI " A " CAN " ; " CAP " j " CAR " , " CAT " P 
"CAW", "CODY, "COG", "COL", "CON", "EOO™; "COP Kë "COT"; 
"COW", "COX; "CRY", "CUB", "CUE", "CUP P. "CUR", "CUT", 
" DAB " d " DAD " " " DAM" " " DAN" A " DAR" " " DAY " ; " DEE " $ " DEL " P 
"DEN", "DES, "DEW", DIED" "DIE", "DIG", "DIN", "DIP", 


"po", " DOE", "DOG", " DON", "DOT", " DOW", "DRY", "DUB", 
" DUD", " DUE", " DUG", " DUN", "EAR", "BAT"; "ED", "EEL", 
"EGG", "EGO", "ELI Va "ELK", "ELM", "ELY", "EM", "END ms 
" EST " J " ETC " » " EVA" y " EVE " , " EWE " 7 " EYE " " " FAD " ; " FAN " F 
"FAR", "FAT", "FAY", "FED", "FEE", "FEW", "FIB", "FIG", 
"FIN", "EER", "ELT", "FLO", "ELY"; "FOE", "FOG", "FOR", 
"FRY", "FUM", "FUN", "FUR", "GAB", "GAD", "GAG", "GAL", 
"GAM", "GAP ue "GAS T "GAY", "GEE "n "GEL", "GEM", "GET Za 
"GIG", "GIL", "GIN", "GO", "GOT", "GUM", "GUN", "GUS", 
" GUT " 7 " GUY " , " GYM" ; " GYP " P " HA" 7 " HAD " ; " HAT, " " " HAM" 7 
"HAN", "HAP nm "HAS P "HAT", "HAW", "HAY", "HE", "HEM", 
"HEN", "HER", "HEW", "HEY" "HT", "HID*, "HIM", "HIP", 
"HIS", "HIT" "HOT; "HOB", "HOC", "HOE", "HOG", "HOP", 
"HOT", "HOW", "H UB", "H UE", "HUG", "HUH", "HUM", "HUT", 
np. "TOY", "IDA", net "IKE", "LLLI". "INK", "INN", 
Tom "LON", "TO", "TRA", "TRE", "TRK", MES" y ET 

"ELS "DV, "JAB", "JAG", "JAM", "JAN", "JAR", "JAW", 
IAN | "JET", "JIG", "JIM", "gom, "JOB", "JOE", "JOG", 
" " " " " T " " T " " " " " " " " " 

" E " : " ed " : " SE " : " ees " : " Sc? É " iu " ; " a " : " a " : 
" LAG " d " LAM" 7 " LAP " " " LAW " " " LAY " " " LEA" ; " LE D " " " LEE " f 


"LEG", "LEN", "LEO", "LET, "LEW", "LID", "LIE", "LIN", 
"LIP", DEER, TEO", "LOB", "LOG", "LOP", "nos", "LOT"; 
" LOU" 7 " LOW " " " LOY " y " LUG " y " LYE " $ "MA" ; "MAC " P "MAD " n 
"MAE " " "MAN " f "MAO " , "MAP " " "MAT " e "MAW " A "MAY " ' "ME " , 
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"MEG", "MEL", "MEN", "MET", "MEW", "MID", "MIN", "MIT", 
"MOB " S "MOD " , "MOE " ' "MOO " ; "MOP " n "MOS " , "MOT " A "MOW " ; 
" MUD " ; " MUG " " " MUM " e " MY " d " NAB " $ " NAG " 7 " NAN " P " NAP " z 
"NAT", "NAY", "NE", "NED", "NEE", "NET", "NEW", "NIB", 
"NIL", "NIP", "NIT", "NO", "NOB", "NOD", "NON", "NOR", 
"NOT", "NOV", "NOW", "NU", "NUN", "NUT", tor, "OAF", 
"OAK", "OAR", "OAT " "ODD i "ODE We "OF um "OFF Wë "OFT um 
"OH", "OTI", "OK", "OLD", "ON", "ONE", "OR", "ORB", 
"ORE", "ORR", "ost; "OTT"; "QUR", "OUT", "OVA", "on", 

" OWE " " " OWL " " " OWN " y " OX " F " PA" A " PAD " " " DAT, " P " PAD " n 
" PAN " A " PAP " " " PAR" ' " PAT " e " PAW " E " PAY " ' " PEA" » " PEG " 
"PEN", "PEP", "PER", "PET", "PEW", "p HI Wë WC WA "PIE", 
"PIN", "BET" "PLY", "PO", "POD", "POE", "POP", "POT; 
"POW", "PRO", "PRY", "PUB", "PUG", "PUN", "PUP", "PUT", 


"QUO " ' " RAG " , " RAM" ' " RAN " " " RAP " F " RAT " S " RAW " ^ " RAY " $ 
" REB " y " RED " S " REP " d " RET " 7 " RIB" > " RI D" $ " RIG" $ " RIM" F 
" RIO" e " RIP " $ " ROB " , " ROD " pS " ROE " " " RON" " " ROT " 7 " ROW" n 
" ROY " " " RUB " " " RUE " e " RUG " P " RUM" 7 " RUN " ; " RYE " $ " SAC " 7 
" SAD " $ " SAG " " " SAL " ? " SAD " " " SAN " $ " SAP " E " SAT " 7 " SAW " P 
"SAY", "SEA", "SECT, "SEE", "SEN", "SETS, "SEW", "SHE", 
"SHY", "SIN", "SIP", "SIR", "STS", "SLT, "SKI", "SKY", 
TSEX Ty TSO"; "SOB", "SOD" ; "SON", TSOR) "SOW", "SOY", 


"SPA", "SPYT; "SUB", "SUD", "SUE", "SUM", "SUN", "SUP", 
" TAB " E " TAD " 7 " TAG " ' " TAN " $ " TAP " e " TAR " F " TEA " y " TE D " E 
"TEE", "TEN", "THE", "THY", "TIC"; BEER "TIM", "TIN", 
"TIP t "TOC; "TOE", "TOG", "TOM", "TON", "TOO", "TOP T 
"TOW", "TOY", "ERYS "TUB", "TUG", "TUM", "TUN", "TWO", 
"UN", "ups "US", "USE", "VAN", "VAT", ES Tas "MITES; 
" WAD " 7 " WAG " 7 " WAR " " " WAS " 7 " WAY " A " WE " A " WEB " " " WED " 7 
"WEE", "WET", "WHO", "WHY", "WIN", "WIT", "WOK", "WON", 
" WOO " » " WOW " " " WRY " " " WU " " " YAM " 7 " YAP " d " YAW " » " YE " ` 

" YEA" 7 " YES " $ " YET " , " YOU " S "ABED " ; "ABEL " 7 "ABET " 7 "ABLE " 7 


"ABUT", "ACHE", "ACID", "ACME", "ACRE", "ACTA", "ACTST", "ADAM", 
"ADDS", "ADEN", "AFAR", "AFRO", "AGEE", "AHEM", "AHOY", "AIDA", 
"AIDE", "AIDS", "AIRY", "AJAR", "AKIN", "ALAN", "ALEC", "ALGA", 


"ALIA", "ALLY", "ALMA", "ALOE", "ALSO", "ALTO", "ALUM", "ALVA", 
" AMEN " " " AMES " ' "AMI D " 7 " AMMO " E " AMOK " e " AMOS " ' " AMRA " " ANDY " P 
"ANEW", "ANNA", "ANNE", "ANTE", "ANTI", "AQUA", "ARAB", "ARCH", 
"AREA", "ARGO", "ARID", "ARMY", "ARTS", "ARTY", "ASIA", "ASKS", 
"ATOM", "AUNT", "AURA", "AUTO", "AVER", "AVID", "AVIS", "AVON", 


"AVOW", "AWAY", "AWRY", "BABE", "BABY", "BACH", "BACK", "BADE", 
"BAIL", "BAIT", "BAKE", "BALD", "BALE", "BALI", "BALK", "BALL", 
"BALM", "BAND", "BANE", "BANG", "BANK", "BARB", "BARD", "BARE", 
"BARK", "BARN", "BARR", "BASE", "BASH", "BASK", "BASS", "BATE", 
"BATH ms "BAWD Vë "BAWL", "BFAD Wë "BEAK", "BRAN M". "BEAN", "BEAR", 
"BEAT", "BEAU", "BECK", "BEEF", "BEEN", "BEER", "BEET", "BELA", 
"BELL", "BELT", "BEND", "BENT", "BERG", "BERN", "BERT", "BESS", 
"BEST", "BETA", "BETH", "BHOY", "BIAS", "BIDE", "BIEN", "BILE", 
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"BILK", "BILL", "BIND", "BING", "BIRD", "BITE", "BITS", ""BLAB", 
"BLAT", "BLED", "BLEW", "BLOB", "BLOC", "BLOT", "BLOW", "BLUE", 
"BLUM", "BLUR", "BOAR", "BOAT", "BOCA", "BOCK", "BODE", "BODY", 
"BOGY", "BOHR", "BOIL", "BOLD", "BOLO", "BOLT", "BOMB", "BONA", 
"BOND", "BONE", "BONG", "BONN", "BONY", "BOOK", "BOOM", "BOON", 
"BOOT", "BORE", "BORG", "BORN", "BOSE", "BOSS", "BOTH", "BOUT", 
" BOWL " 7 " BOYD " " " BRAD " y " BRAE " S " BRAG " 7 " BRAN " $ " BRAY " j " BRE D " 7 
"BREW", "BRIG", "BRIM", "BROW", "BUCK", "BUDD", "BUFF", "BULB", 
"BULK", "BULL", "BUNK", "BUNT", "BUOY", "BURG", "BURL", "BURN", 
"BURR", "BURT", "BURY", "BUSH", "BUSS", "BUST", "BUSY", "BYTE", 
"CADY^, "CAFES, "CAGE", "CAIN", © "CAKE", "CALE", "CALL", "CALM", 
"CAME", "CANE", "CANT", "CARD", "CARE", "CARL", "CARR", "CART", 
"CASE", "CASH", "CASK", "CAST", "CAVE", "CEIL" "CELI"; "CENT", 
"CERN", "CHAD", "CHAR", "CHAT", "CHAW", "CHEF", "CHEN", "CHEW", 
"CHIC", "CHIN", "CHOU", "CHOW", "CHUB", "CHUG", "CHUM", "CITE", 
CET Ty "CLAD", "CLAM", "CLAN", "CLAW", "CLAY", "“CLOD™,; "CLOG", 
OLOT". "CLUB"; - "GLUE"; C'CORLU, COAT". ` "COCA, EEN "COCO", 
"CODA", > "CODEN, "CODY", "COED", ""OOIL", "COIN", DEER, "COLA", 
"CORD" "COLT "COMA", "COMB", "COME", "COOK", "COOL"; "COON", 
"COOT", "CORD", "CORE", "CORK", "CORN", "COST", "COVE", "COWL", 
"CRAB", "CRAG", "CRAN n "CRAY", "CREW", "CRIB", "CROW", "CRUD", 
"CUBA. "CUBREN,  "OUEFM, "CULLY; "CULT", "CUNY", "CURB", “NCURD", 
"CURE", "CURL", "CURT", "CUTS", "DADE", "DALE", "DAME", "DANA", 
"DANE", "DANG", "DANK", "DARE", "DARK", "DARN", "DART", "DASH", 
"DATA", "DATE", "DAVE", "DAVY", "DAWN", "DAYS", "DEAD", "DEAF", 
"DEAL", " DEAN", "DEAR", " DEBT", "DECK", "DEED", "DEEM", "DEER", 
"DEFT", "DEFY", "DELL", "DENT", "DENY", "DESK", "DIAL", "DICE", 
"DIED*, “DIET, "DIME", "DINE"; "DING", "DINT"; "DIRE"; "DIRT*, 
"DISC", "DISH", "DISK", "DIVE", "DOCK", "DOES", "DOLE", "DOLL", 
"DOLT", "DOME", "DONE", "DOOM", "DOOR", "DORA", "DOSE", "DOTE", 
" DOUG", "DOUR", " DOVE", "DOWN", "DRAB", "DRAG", " DRAN ur "DRAW", 
" DREW", " DRUB", "DRUG", " DRUM", " DUAL", " UCK", "DUCT", " DUEL", 
"DUET", "DUKE", "DULL", "DUMB", "DUNE", " UNK", " DUSK", "DUST", 
"DUTY", "EACH", "EARL", "EARN", "EASE", "EAST", "EASY", "EBEN", 
"ECHO", "EDDY", "EDEN", "EDGE", "EDGY", "EDIT", "EDNA", "EGAN", 
"ELAN", "7 BA", "ELLA", "ELSE", " EMIL", " MIT", "EMMA", "ENDS ur 
"ERIC", "T ROS "n "EVEN", " EVER", "EVIL"; " YED", "FACE", "FACT", 
"FADE", "FAIL", "FAIN", "FAIR", "FAKE", "FALL", "FAME", "FANG", 
"FARM", "FAST", "FATE", "FAWN", "FEAR", "FEAT", "FEED", "FEEL", 
"FEET", "FELL", "FELT", "FEND", "FERN", "FEST", "FEUD", "FIEF", 
"FIGS", "FILE", "FILL", "FILM", "FIND", "FINE", "FINK", "FIRE", 
"FIRI my "FISH", "FISK", "EDS sy MEETS 7 "RIVE", "FLAG", "FLAK", 
"FLAN Wë "FLAT", "FLAW", "FLEA", "FLED", "FLEW", "EBIT", "ELOC",; 
"FLOG", "FLOW", "FLUB", "FLUE", "FOAL", "FOAM", "FOGY", "FOIL", 
"FOLD", "FOLK", "FOND", "FONT", "FOOD", "FOOL", "FOOT", "FORD", 
"FORE", "FORK", "FORM", "FORT", "FOSS", "FOUL", "FOUR", "FOWL", 
"FRAU", "FRAY", "FRED", "FREE", "E RET”; "FREY", "FROG", "FROM", 
"FUEL", "FULL", "FUME", "FUND", "FUNK", "FURY", "FUSE", "FUSS", 
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"GAFF", "GA 
"GALT" GE" ; e 
"GA e "GAME" GAIL" S 
" SE " , "GAVE" d "GANG" 4 " GAIN" , "GA 
"GIRL", "GIBE", "GAWK", GARB", " TTN PEAD 
"G RL", "GIST", "GIFT", EE GARY p IGA B n. COATE 
" GE á Ee : "GIVE" É “GILD j " SE 7 ^ ee i " GATE " É "GALL" 
R", " , "G d "GLAD" LL" " ENE", " Ze "GAUL" : 
y GORE", M GE ; i EER : , " Se , "GLEE" : SIDI dÉ E E E " Peer , 
, GREG", Ñ ORY", Ee d "GOLF" ^ "GLUT" P GLEN", " od 5 "GIRD" , 
GRUB", OM "GR H", "COUT". "GONE", E GOAD", "G T3755 "GLO ^id 
"GWYN" n GULF ", s Ge Vë "GRID" , "GOWN" ! , GONG", " OAL", n SE : , 
, HAAG", SE LL", MGE, "CRIM". 'GRAB" Tao ur "GO T WW 
AAS n "HA " "GURU". "CRIN". GRAD", " Ob Ve 
CK", NERT " "GUSH". "GRIT" SERAY"; 
L", "HAIR", a eege 
, "HALE", GWEN" 
Duy "HALE" , 
, 


E 


"HALL" et 
, H 
"HARK", GE n "HALT 
wo HARM" y H 
Se CHAN "yo "HARI", "HAND", "I 
ECK" K" n , "HA i HANG" 
nr , "HE ! HAYS" SH" " , "H 

HERD" EED", Eër $ "HEA , HAST" ANK" S 
, "HERE" HEEL", p x; D", "HEA , "HATE" d HANS" nm 

á "HERO" HEFT", SM ME L", "HEA 7 "HATH". HARD" 
, "HERS" HELD" LS R", "HE , "HAUL". 
, "HESS", HELL" AT", "E r 

We , "H E HEBE" 
x HEWN" . ELM", nr ro 
H "HICK" "HERB"; 

, "HIDE" 
, 


"HIGH" n 
"H á HIKE" 

» HIVE", nior. "HILL" 

HOME" s or, "H , "HILT" 

"H i HONE" OCK" T "H 

OSE", Bs , "HON , "HOFFE", HIND" " 

"HUED" HOST" de K", E " "HOL Es HINT" : 
"HU $ "HUFF", HOUR" 00D", "H p "HOL d "HIRE" 

"I NT", "HUR Da "HUGE", "HOVE" " HOOF", "H a Ñ HOLM". "HISS" 

SNE SE "HURL". "HUGH", ae ge "HOOT". "HOLT", 

Y I H S I 

" OTA", "TO ait "IDLE". "HURT", UGO", " NL "HOY i "HORN", 

IVAN" - WA", D E", "IF , "HUSH" HULK" E T". "d , 

d "JACK" IRIS" t FY", "T á "HYDE" ý HULL" UCK" 

É "JADE", "IRMA", " NCA", "I Pa "HYMN", "HUNK", 

E", "JAIL". IRON" , NCH", "IN , "IBIS". 

, "JAKE". ISLE", " TO", "IO , 

; "JANE" ICE ui NS", 

, JAVA", ‘i Ee P 

EAN", 


"JEFF" i 
, TER 

"JOAN", VES "JE 

"JOLT" Jed Ee ss", "JES 

r "JOVE" JOCK" ic T", "J 

nr , JIBE" 

, ' JUD JOEL" " 3 

D" Tu y " T d JILL" 

id "JUDE" JOEY" muy L", "J 
KE "JUD "d JOHN" JILT" Wu 
o", "J d “JO d JIVE" 
JUDY" Ke IN", "3 P, 
r JUJU", " OKE", 
á "JUKE" 
, 


MAE t "JU 
WK JUNE" 
" us i , " a P , "JUNK" d PS 
X 7 "KERN" , "KANT" JUNO", Ee 
KIRK A ” " N , i KE d i KARL " URY " " 3 
RN KEE um "KEYS", "KATE", Ei a 
Tanp bid fi en) "KONG" i KNEE", E TEL", SE ; "KENO". 
SE See "LAND", "LADY", Ge dee Ke "KING", 
E F " ES y " , " L m I " " i ” " , 
"LENS" : j LEAK", M Se ye - Se , " cs ii , LAIN" : " KURT Vë " Se ! , 
"LICE " E , SN " "LEAR" , "LAWN" 4 > LARD", " sane ` " E d 
"LIKE", SC E Rd "LEEK", a oe Re 
LENE SE E "LIEN", "LESS", " EER", URS S "LEAD", 
Ge a "LINT", Edu EC EE oon "LEND", 
Se SN LOAN", "LION", SE ELA SC "LIAR". 
s" A " , "I, SA" W "T , WW E 
"LUKE", EE LA ge "LOFT". "LIST", SE Se 
CH : T 7 Gees L "LOVE" r GOOT " EE t, s : r "LOAD" - 
se ; T , "LYN ; "LUNG" É LOWE" A ORD", "I S", "LOLA" r 
MANA" IL" s N", BIS 7 "LURA" H LUCK" ORE", e j 
, "MANN" ` MAIN" - ON", "I, á "LURE" d "LUCY" LOSE" 
1 "MA i MAKE" YRA" " E", " 7 "LUGE" ` 
Nr , "MA k "MALE" : MACE" LURK" , " E", 
RC", DEE K "MALI". "MADE" LUSH; 
E"; "MARK" , "MALL" , SE dÉ 
, "MARS FS MALT" 
r "MART" 
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"MARY", "MAS Hou "MASK", "MASS", "MAST", "MATE", "MATH", "MAUL", 
"MAYO", "MEAD", "MEAL", "MEAN", "MEAT", "MEEK", "MEET", "MELD", 
"MELT", "MEMO", "MEND", "MENU", "MERT", "MESH", "MESS", "MICE", 
"MIKE", "MILD", "MILE", "MILK", "MILL", "MILT", "MIMI", "MIND", 
"MINE", "MINI", "MINK", "MINT", "MIRE", "MISS", "MIST", "MITE", 
"MITT", "MOAN", "MOAT", "MOCK", "MODE", "MOLD", "MOLE", "MOLL", 
"MOLT", "MONA", "MONK", "MONT", "MOOD", "MOON", "MOOR", "MOOT", 
" MORE " e " MORN " * " MORT " y " MOS S " ? " MOST " SG " MOT H " 7 " MOVE " ; " MUCH " 
"MUCK", "MUDD", "MUFF", "MULE", "MULL", "MURK", "MUSH", "MUST", 
"MUTE", "MUTT", "MYRA", "MYTH", "NAGY", "NAIL", "NAIR", "NAME", 
"NARY", "NASH", "NAVE", "NAVY", "NEAL", "NEAR", "NEAT", "NECK", 
"NEED", "NEIL", "NELL", "NEON", "NERO", "NESS", "NEST", "NEWS", 
"NEWT", "NIBS", "NICE", "NICK", "NILE", "NINA", "NINE", "NOAH", 
"NODE", "NOEL", "NOLL", "NONE", "NOOK", "NOON", "NORM", "NOSE", 
"NOTE", "NOUN", "NOVA", "NUDE", "NULL", "NUMB", "OATH", "OBEY", 
"OBOE", "ODIN", "OHIO", "OILY", ““OINT™,. "OKAY", "OLAF", "OLDY", 
" OLGA" " " OLIN" , " OMAN " * " OMEN " e " OMI T " ? " ONCE, " A " ONES " e " ONLY " 7 
"ONTO", "ONUS nS "ORAL", "ORGY", "OSLO", "ORIS", "OTTO"; "OUCH", 
" OUST " ; " OUTS " y " OVAL " i " OVEN " f " OVER" e " OWLY " y " OWNS " " QUAD " i 
"QUIT", "QUOD", "RACE", "RACK", WRAGY "i, "RAFT", "RAGE", "RAID", 
"RATL", "RAIN", "RAKE", "RANK", "RANT", "RARE", "RAS SÉIS "RATE", 
" RAVE " 7 " RAYS " A " READ " 4 " REAL " " " REAM " 7 " REAR " $ " RECK " " " REED " " 
"REEF", "REEK", "REEL", "REID", "REIN", "RENA", "REND", "RENT", 
"REST", "RICE", "RICH", "RICK", "RIDE", "RIFT", "RILL", "RIME", 
"RING", "RINK", "RISE", "RISK", "RITE", "ROAD", "ROAD "4 "ROAR", 
"ROBE", "ROCK", "RODE", "ROIL", "ROLL", "ROME", "ROOD", "ROOF", 
"ROOK", "ROOM", "ROOT", "ROSA", "ROSE", "ROSS", "ROSY", "ROTH", 
"ROUT", "ROVE", "ROWE", "ROWS", "RUBE", "RUBY", "RUDE", "RUDY", 
"RUIN", "RULE", "RUNG", "RUNS", "RUNT", "RUSE", "RUSH", "RUSK", 
"RUSS", "RUST", "RUTH", "SACK", "SAFE", "SAGE", "SAID", "SAIL", 
"SALE", "SALK", "SALT", "SAME", "SAND", "SANE", "SANG", "SANK", 
" SARA" " " SAUL " , " SAVE " P " SAYS " ; " SCAN " $ " SCAR" P " SCAT " b " SCOT " " 
"SEAL", "SEAM", "SEAR", "SEAT", "SEED", "SEEK", "SEEM", "SEEN", 
"SEES", "SELF", "SELL", "SEND", "SENT", "SETS", "SEWN", "SHAG", 
"SHAM", "SHAW", "SHAY", "SHED", "SHIM", "SHIN", "SHOD", "SHOE", 
"SHOT", "SHOW", "SHUN", "SHUT", "SICK", "SIDE", "SIFT", "SIGH", 
"SIGN", "SILK", "SILL", "SILO", "SILT", "SINE", "SING", "SINK", 
"SIRE", "SITE", "SITS", "SITU", "SKAT", "SKEW", "SKID", "SKIM", 
"SKIN", "SKIT", "SLAB", "SLAM", "SLAT", "SLAY", "SLED", "SLE 
"SLID", "SLIM", "SLIT", "SLOB", "SLOG", "SLOT", "SLOW", "SLUG", 
"SLUM", "SLUR", "SMOG", "SMUG", "SNAG", "SNOB", "SNOW", "SNUB", 
"SNUG", "SOAK", "SOAR", "SOCK", "SODA", "SOFA", "SOFT", "SOIL", 
"SOLD", "SOME", "SONG", "SOON", "SOOT", "SORE", "SORT", "SOUL", 
"SOUR", "SOWN", "STAB", "STAG", "STAN", "STAR", "STAY", "STEM", 
"STEW", "STIR", "STOW", "STUB", "STUN", "SUCH", "SUDS", "SUIT", 
"SULK", "SUMS", "SUNG", "SUNK", "SURE", "SURF", "SWAB", "SWAG", 
" SWAM", " SWAN", " SWAT H " SWAY", " SWIM", " SWUM", " TACK", " TACT "n 
"TAIL", "TAKE", "TALE", "TALK", ` "TALL", "TANK", "TASK", "TATE", 


Haller [Page 11] 


RFC 1760 The S/KEY One-Time Password System February 1995 


"TAUT", "TEAL", "TEAM", "TEAR", "TECH", "TEEM", "TEEN", "TEET", 
"TELL", "TEND", "TENT", "TR RM", "TERN", "TESS", "TEST", "THAN", 
"THAT", "THEE", "THEM", "THEN", "THEY", "THIN", "THIS", "THUD", 
"THUG", "TICK", “TIDE", "TIDY", "TIED", "TIER", "TILE", “TILL”, 
"TILT", "TIME", "TINA", "TINE", "TINT", "TINY", "TIRE", "TOAD", 
"TOGO", "TOIL", "TOLD", “TOLLE, "TONE", "TONG", "TONY", "TOOK", 
"TOOL", "TOOT", "TORE", "TORN", "TOTE", "TOUR", "TOUT", "TOWN", 
"TRAG", "TRAN WË "TRAY", "TREE", "TREK", "TRIG", "TRIM", "TRIO", 
"TROD", "TROT", "TROY", "TRUE", "TUBA", "TUBE", "TUCK", "TUFT", 
"TUNA", "TUNE", "TUNG", "TURE", "TURN", "TUSK", "TWIG", "TWIN", 
"TWIT", "ULAN", "UNIT", "URGE", "USED", "USER", "USES", "UTAH", 
"VAIL", "VAIN", "VALE", "VARY", "VASE", "VAST", "VEAL", "VEDA", 
"VEIL", "VEIN", "VEND", "VENT", "VERB", "VERY", "VETO", "VICE", 
"VIEW", "VINE", "VISE", "VOID", "VOLT", "VOTE", "WACK", "WADE", 
"WAGE", "WAIL", "WAIT", "WAKE", "WALE", "WALK", "WALL", "WALT", 
"WAND", "WANE", "WANG", "WANT", "WARD", "WARM", "WARN", "WART", 
"WASH", "WAST", "WATS "y "WATT", "WAVE", "WAVY", "WAYS Wë "WEAK", 
"WEAL", "WEAN", "WEAR", "WEED", "WEEK", "WEIR", "WELD", "WELL", 
"WELT", "WENT", "WERE", "WERT", "WEST", "WHAM", "WHAT", "WHEE", 
"WHEN", "WHET", "WHOA", "WHOM", "WICK", "WIFE", "WILD", "WILL", 
"WIND", "WINE", "WING", "WINK", "WINO", "WIRE", "WISE", "WISH", 
"WITH" "WOLF" ; "WONT" e "WOOD" ; "WOOL" , "WORD" , "WORE" S "WORK" , 
"WORI Wé "WORN", "WOVE", "WRIT", "WYNN", "YALE", "YANG", "YANK", 
"YARD", "YARN",  "YAWL", "YAWN", "YEAH", "YEAR", "YELL", "YOGA", 
"YOKE" } ; 
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